c/cybersecurity-tips

Finally had a week where no phishing emails got through my filter

I set up a custom rule in my email settings last Monday to block any message with the word 'urgent' in the subject line after nearly falling for a fake invoice. It caught 47 spam emails by Friday, including one that looked exactly like my bank's login page. Has anyone else tried using keyword filters like this, and did it hold up over time?

Password managers vs browser autofill: which one is actually safer?

Hot take: using the same password for 10 years finally bit me in the rear

Logged into my old gaming forum account last week and saw someone posted my email and hashed password from a 2014 breach, which taught me to check haveibeenpwned.com before ignoring those security emails from sites I haven't visited in years.

Tried a password manager for 6 months and my anxiety actually got worse

I finally gave in and got Bitwarden back in January after forgetting my work login for the 3rd time. Set up 2FA, long random passwords everywhere, the whole deal. But now I'm paranoid about that one master password. If I lose it or get locked out, I'm toast. Plus my bank locked my account because I logged in from a different IP using the autofill. Anyone else feel less secure with all these layers?

Remember when passwords were just 4 digits for everything

Back in '99 I used the same 4 digit PIN for my voicemail, bank card, and work login. Now I've got a password manager with 47 entries and I still get locked out of my email twice a month. Anyone else miss when life was simpler or do you actually like all these extra layers?

Multi-factor fatigue is a bigger threat than weak passwords

Last month at a station near Portland, our dispatch system got hit because someone kept clicking approve on MFA prompts. Everyone brags about having 2FA enabled, but I disagree it's the golden standard. If you get 10 push notifications at 2am, you're going to approve one out of annoyance. Has anyone else seen their team get burned by this?

Coffee shop wifi made me rethink my password habits

I was at a local cafe in Austin last Tuesday and overheard the barista tell someone their whole network got hit because a customer guessed the guest password in 3 tries. Has anyone else seriously changed their home router password after seeing how easy those public ones are to crack?

I finally learned why my email kept getting hacked the hard way

Was sitting at a coffee shop in Austin last fall, checking my business email on the free wifi. Next thing I know, my dog grooming appointment system was locked and someone was asking for $300 in Bitcoin. Turns out I hadn't updated my router's firmware in like 2 years and the password was still "admin1234." Learned to set up a VPN on my phone and now I change my wifi password every 3 months. Has anyone else had a close call with public wifi?

Hit 50 free cloud storage accounts before I realized it was a problem

I kept signing up for free tiers thinking I was being smart about backups. After I hit 50 of them across different services, I sat down and did the math. The time I spend logging into each one is way more than the $10 a month I'd pay for one real plan. Anyone else end up with a messy pile of free accounts instead of just paying for one solid option?

Lost my whole photo archive to a ransomware attack back in 2017

I was sitting in a coffee shop in Austin when my laptop screen went black and a ransom note popped up demanding $500 in Bitcoin. I had backups, but they were on an external drive that was plugged in at the same time, so it got encrypted too. Ended up paying $200 to a data recovery service that pulled most of my files from the drive's raw sectors. Has anyone else had a backup strategy fail on them in a dumb way like that?

TIL my 'secure' password strategy was actually making me less safe

I popped into a cybersecurity talk at the local library last Tuesday and the guy running it said something that really bugged me. He claimed that changing passwords every 30 days makes people pick weaker ones... and I think he's right. After 3 years of forcing monthly changes at work, I've noticed everyone just uses "Month2023" over and over. Has anyone else noticed their organization's rules actually hurt security instead of helping?

Finally caved on using a password manager last week

My buddy Matt showed me his setup after I watched him log into 5 accounts in 10 seconds. He let me test it on my phone and I was sold when it filled in my bank login automatically. Anyone else hold out for years before switching?

That moment I realized I'd been using the same password for everything for 15 years

Two weeks ago I got a notification about a login attempt on an old forum I forgot about, then checked haveibeenpwned and found my email in 12 breaches. Made me wonder how many times I just lucked out instead of being smart about it. Anyone else have that sinking feeling when they finally checked their password history?

That free public WiFi at the downtown library is not a community service, it's a trap

I stopped by the main branch on 5th Street last Tuesday to print some forms and noticed nobody was using the library's guest network. Everyone was on their phones with data. I asked the IT guy about it and he said they had 3 separate phishing incidents traced to that connection in the last month alone. Am I the only one who thinks offering free unprotected WiFi without a basic warning sign is just asking for trouble?

Hot take: password managers were a game changer for me last week

I always thought they were overkill until I got locked out of my bank account on Tuesday. Had to reset 8 passwords in one day and realized I kept using the same weak ones. My buddy Matt showed me how his Bitwarden setup works and I caved. Now I sleep better knowing my accounts aren't relying on 'Fluffy2020' anymore. Anyone else switch later in life and feel dumb for waiting?

Used a password manager for 3 months and my brain feels empty now

I finally got sick of resetting my bank login every other week so I signed up for Bitwarden back in October. Took me a weekend to swap all my passwords over to 20+ character random strings. Now I can't remember a single password for anything and it's kinda scary but also great. Has anyone else felt kinda weird handing over all that trust to one program?

My brother-in-law the IT guy told me to use the same password for everything so I wouldn't forget it

Six months later someone got into my email and reset my bank password and I lost $400 before I caught it. Has anyone else had a supposedly smart relative give them terrible security advice?

Talking to my dad about his work email habits really made me think

My dad is in his 60s and he told me last weekend he uses the same password for everything including his bank and his fishing forum... I tried to explain why that's risky but he just shrugged. It hit me how normal people don't think about this stuff at all so how do we actually get them to care?

My old router finally gave up last night

I was in the middle of a Zoom call for work around 7pm when the whole internet just dropped. Spent an hour troubleshooting, unplugging, plugging back in, the usual dance. Turns out the 6 year old router I had was just cooked, fan was dead and it was overheating. Anyone else hang onto old networking gear way too long because it still kinda works?

Switched from a password manager to a physical notebook and my accounts are safer now

I used Bitwarden for 2 years but after that LastPass breach I started thinking. My uncle got hacked through a cloud vault leak last March. Now I keep a small notebook locked in a fire safe with all my logins. Has anyone else gone analog and noticed fewer phishing attempts?

Warning: Got a fake password reset email yesterday that almost got me

It looked exactly like a real one from my bank, down to the logo and sender address. I clicked the link before I caught myself. Only thing that stopped me was hovering over the URL and seeing it was some random .xyz domain. This is getting way too good. Has anyone else seen these lately?

Password manager finally clicked after I tested both approaches

I spent last month comparing a browser based password manager against a standalone one. The browser one was convenient but it locked me out after I cleared my cache on accident. The standalone one like Bitwarden took an extra 30 seconds to set up but it saved my butt when I switched to Firefox. I had to recover 14 accounts after that cache mess. Has anyone else had issues with browser storage wiping out saved logins?

Got called out for reusing passwords and it stung

A buddy who works in IT security saw me log into my bank account and asked if I used that password anywhere else. I said probably yeah and he just stared at me. He pulled up haveibeenpwned dot com right there and showed me my email got leaked in like 3 different data breaches from 2019 alone. That was two years ago and now I use a password manager with unique 16 character passwords for every site. Has anyone else had a friend call them out on something like this and actually change their habits?

Why does nobody talk about reusing passwords across work and personal accounts?

I went to update my password manager last week and realized half my coworkers still use the same password for their email as they do for their banking. It took me 5 minutes to show them how a single leak from a forum site could wreck everything, but they just shrugged it off. Has anyone else run into this wall when trying to get people to separate their logins?

Had an IT guy call me out on a fake charging cable

I was at a coffee shop in Austin last week and this guy next to me saw me plug in my phone. He pointed out the cable had a little chip on the end that looked off. He said 'that's a juice jacking cable, someone's grabbing your data while you charge.' I didn't even know that was a thing. Has anyone else run into fake chargers that mess with your phone?